Regulatory change management is the work of finding each change to the rules a firm follows, deciding which obligations it touches and showing that they were reviewed in time. In the United States, rule changes and the plans for them arrive through a handful of official sources: the Federal Register and its API, the Electronic Code of Federal Regulations (eCFR), the Unified Agenda of rules agencies plan and the rule filings of self-regulatory organizations. Each publishes its own fields and dates, and states its own limits.
The stream is large and its dates uneven. From 1 January to 31 October 2026, the Federal Register published 2,472 rule documents, 1,498 proposed rules and 17,505 notices [8]. Of the 2,221 rule documents that carried an effective date, 835 took effect on or before the day they were published, and the median gap was 24 days (computed for this report from [8]).
What examiners expect a change program to show
Bank and consumer finance supervisors assess change management as its own factor. The Consumer Financial Protection Bureau's examination manual of August 2017 tells examiners to review the processes for identifying new regulatory requirements and changes in them [1]. Under the consumer compliance rating system of the Federal Financial Institutions Examination Council, effective 31 March 2017, management that "fails to monitor and respond to changes in applicable laws and regulations" is rated 5 for change management, and a 1 goes to management that "anticipates and responds promptly" [2]. The Office of the Comptroller of the Currency's handbook of June 2018 has examiners review tracking records, committee minutes and the policies adopted for each change, and check that the bank re-tests its systems when regulations change [3].
Proposed and final rules in the Federal Register API
The Federal Register API needs no key and searches every Federal Register document published since 1994, up to 1,000 per request [4]. Each record carries the fields a change program filters on: effective_on, cfr_references, action, comments_close_on, docket_ids, regulation_id_numbers (the regulation identifier number, or RIN, that follows a rule from plan to final text), corrections and links to the official PDF, the raw text and the XML [4]. Queries can be limited by agency, CFR title and part, RIN or document type [4].
The structured fields leave gaps. On 7 November 2026, the SEC final rule the API listed first by publication date, published the day before, had no effective_on [5]. Its dates sit in the DATES paragraph, one line for each group of sections: amendments to rules 0-10 and 0-7 take effect on 4 February 2027, and amendments to rule 203-3 and Form ADV take effect, with a compliance date, on 4 February 2027 [6]. From January to October 2026, 251 of 2,472 rule documents had no effective_on value (computed for this report from [8]).
FederalRegister.gov says it is not an official legal edition, and each document links to the official PDF on govinfo.gov [4]. Documents go on public inspection at least one business day before publication, and agencies may still withdraw them [11].
Effective dates, compliance dates and the 30-day rule
Under 5 U.S.C. 553(d), a substantive rule is published at least 30 days before its effective date, with three exceptions: a rule that grants or recognizes an exemption or relieves a restriction, interpretative rules and statements of policy, and a rule for which the agency finds good cause and publishes that finding with the rule [24]. A major rule takes effect no sooner than 60 days after Congress receives its report or after its publication in the Federal Register, whichever comes later [25].
The Office of the Federal Register counts the day after publication as the first day, and a date that falls on a weekend or holiday moves to the next federal business day [12]. For a rule published on 6 November 2026, its table gives 7 December for 30 days, 5 January for 60 and 4 February for 90, the date in the SEC rule above [6, 12].
From January to October 2026, 1,089 rule documents took effect 30 days or more after publication and 297 within 1 to 29 days (computed for this report from [8]). The Rule type also covers corrections, temporary safety-zone rules, interim final rules and compliance-date extensions [8].
Compliance dates move on their own. The Office's drafting handbook separates the compliance date, when affected persons must comply, from the effective date, when a rule changes the CFR [13]. The Form PF amendments of March 2024 first had a compliance date of 12 March 2025. Four extensions moved it to 12 June 2025, 1 October 2025, 1 October 2026 and 1 July 2027 [7]. The API's effective_on for the last extension holds 3 September 2026, its publication day [5, 7].
Point-in-time text in the eCFR
The eCFR is an editorial compilation of the CFR and the amendments published in the daily Federal Register, and its pages say the content is "authoritative but unofficial" [15, 23]. It asks legal researchers to verify against the official CFR, the daily Federal Register and the List of CFR Sections Affected, which the Office of the Federal Register issues monthly and GovInfo holds [14, 15]. Amendments are typically integrated about two business days after their effective date [16]. A future amendment appears first as a cross reference, and the eCFR warns that agencies may correct, delay or withdraw it before that date [16].
Its versioner service keeps dated versions of each section: 47 for 17 CFR 232.405, the SEC's rule on interactive data files, 45 of them marked substantive [21]. Comparing two dated versions shows which passages moved, as in a worked example on one SEC rule.
Horizon scanning with the Unified Agenda
Executive Order 12866 has each agency list the regulations it has under development or review, each with a RIN, a summary, the legal authority and any legal deadline [27]. The 2026 Unified Agenda, introduced in the Federal Register on 14 August 2026, has agendas from 78 federal agencies in its complete online edition [30]. Its entries cover actions agencies plan to take within the next 12 months, with long-term actions listed apart [28].
Agenda dates are forecasts. The agenda's own introduction says dates and schedules are subject to change and that actions may occur before or after the dates listed [30]. A 2015 draft report for the Administrative Conference of the United States found that 28 of 69 economically significant proposed rule entries in the Spring 2013 agenda, 41%, had not been published 16 months later [31]. The Congressional Research Service notes that no penalty applies to a rule issued without prior notice in the agenda [32].
Self-regulatory rule filings
Exchanges, FINRA, registered clearing agencies and the MSRB change their rules through filings listed on the SEC's rulemaking pages [33]. Form 19b-4 marks each change with brackets around deleted words and underscoring under added ones [34]. Many changes take effect on filing. Of 1,478 SEC notices published from January to October 2026 whose titles begin "Self-Regulatory Organizations", 1,105 were notices of filing and immediate effectiveness (computed for this report from titles in [9]).
In one, NYSE American LLC filed a change on 19 May 2026, and the notice reached the Federal Register nine days later, pointing to the exchange's website for the rule text [10]. Rule 19b-4 has each organization post its filings on its own website within two business days and keep a current, complete version of its rules there [34].
Consolidated text lags in other systems too
The United Kingdom's legislation.gov.uk lists the changes new legislation makes to existing legislation, usually within two weeks of its publication [35]. Its editorial team then applies them to the revised text, and until an effect is applied it is shown beside the provision it changes, much as the eCFR shows future amendments as cross references [16, 35].
A regulatory change management process built on official sources
One SEC change shows each step. The 2026 Unified Agenda lists RIN 3235-AN39 at the proposed rule stage, with a proposal published on 12 January 2026 and comments closing on 13 March [29]. The final rule, published on 6 November with the same RIN, raises the assets-under-management threshold in 17 CFR 275.0-7 from $25 million to $1 billion and removes the test based on total assets, effective 4 February 2027 [6, 23]. On 7 November the eCFR still shows the $25 million text, in line with its practice of integrating amendments after they take effect [16, 23]. From about 1 March 2037, the dollar amount is set by Commission order roughly every ten years, so that obligation's source becomes an order as well as the CFR [6].
The rows read from paragraphs (a)(1) and (a)(2) of that section go back to review, with the 6 November document as the change's source and 4 February 2027 as the date the new text applies [6, 23]. In an obligations register built from regulation text, each row records the passage and the version it was read from, so the changed passage names the rows to recheck. A re-read row is a new extraction and can be scored like the first, as in how to test document extraction accuracy.
Rillor's regulatory change and obligations register work compares the new version of a text with the one each register row was read from, sends the rows tied to a changed passage back to review and keeps each row's source version and every change since.
Read the full report
The full report adds the API queries, the 2026 date counts, the eCFR's date fields, the agenda's track record and all 35 sources.